Fallos del tipo CWE-788

147 resultados

Acesso de memória além do limite do buffer

A aplicação tenta acessar dados em um endereço de memória que está fora dos limites de um buffer alocado. Isso ocorre quando o código não valida corretamente o tamanho ou índice antes de ler/escrever, permitindo leitura de dados sensíveis ou corrupção de memória adjacente.

Ejemplo

Um servidor processa um pacote de rede e copia dados para um array de 256 bytes sem verificar o tamanho real do pacote. Se o pacote tiver 500 bytes, a cópia escreve 244 bytes além do buffer, sobrescrevendo variáveis locais ou dados de controle da pilha.

Cómo mitigar

Sempre validar e limitar o tamanho de leitura/escrita aos limites conhecidos do buffer antes de acessá-lo. Use funções seguras (como `strncpy` em C, ou linguagens com gerenciamento automático de memória), ou implemente verificações explícitas de limites e índices.

CVE-2021-42266HIGHAdobe Animate FLA File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.5%CVE-2021-35999HIGHAdobe Prelude Memory Corruption Remote Code Execution VulnerabilityEPSS 2.4%CVE-2021-35996HIGHAdobe After Effects Memory Corruption Could Lead To Arbitrary Code ExecutionEPSS 2.4%CVE-2021-42726HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code executionEPSS 2.3%CVE-2021-43023HIGHAdobe Premiere Rush EPS/TIFF File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43025HIGHAdobe Premiere Rush SVG File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43028HIGHAdobe Premiere Rush M4A File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43747HIGHAdobe Premiere Rush WAV File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43022HIGHAdobe Premiere Rush PNG File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43021HIGHAdobe Premiere Rush EXR File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43026HIGHAdobe Premiere Rush MXF File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43029HIGHAdobe Premiere Rush M4A File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-36000HIGHAdobe Character Animator Memory Corruption Arbitrary Code Execution VulnerabilityEPSS 2.3%CVE-2021-36017HIGHAdobe After Effects PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 2.2%CVE-2021-40754HIGHAdobe After Effects WAV File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.2%CVE-2021-40751HIGHAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.2%CVE-2021-40752HIGHAdobe After Effects M4A File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.2%CVE-2021-40753HIGHAdobe After Effects SVG File Parsing Memory Corruption Arbitrary Code ExecutionEPSS 2.2%CVE-2021-44712MEDIUMAdobe Acrobat Reader Memory Corruption could lead to Application denial-of-serviceEPSS 2.2%CVE-2021-42735HIGHAdobe Photoshop Memory Corruption could lead to Arbitrary code executionEPSS 2.1%